Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
File:                     iDHWIdGS-S2wk9kzCSweI2tNSXs.mft (raw, json)
Hash identifier:          FKfhyKBIr5R07N3JopVDbnOgp7LoO6DGldRc7yhuao8=
Subject key identifier:   8B:DA:F2:CE:2D:F3:E2:D2:A7:68:65:A8:7B:A2:73:D6:B7:83:BA:72
Authority key identifier: 88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B
Certificate issuer:       /CN=8831d621d192f92db093d933092c1e236b4d497b
Certificate serial:       018F86A3CD0C39B6A559D5FF577143D8AD21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
Manifest number:          1176
Signing time:             Fri 17 May 2024 13:00:32 +0000
Manifest this update:     Fri 17 May 2024 13:00:32 +0000
Manifest next update:     Sat 18 May 2024 13:00:32 +0000
Files and hashes:         1: J6Ac_GRgYZ1v3sXCr5HSJS6CMVA.roa (hash: /Qnl6kXRir3tZHweQe+yImM+G7oPBoX1QY2DYQxeZLc=)
                          2: iDHWIdGS-S2wk9kzCSweI2tNSXs.crl (hash: hGFrUHd7150SnXsBDLDJroeXjy8OxbLD0mFrMGjlZCw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:a3:cd:0c:39:b6:a5:59:d5:ff:57:71:43:d8:ad:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8831d621d192f92db093d933092c1e236b4d497b
        Validity
            Not Before: May 17 13:00:32 2024 GMT
            Not After : May 18 13:00:32 2024 GMT
        Subject: CN=8bdaf2ce2df3e2d2a76865a87ba273d6b783ba72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:1a:8c:b2:af:41:a9:e9:4e:c9:b5:3a:e0:
                    e2:ff:7d:2c:5f:53:3a:46:b9:12:25:53:f9:21:22:
                    02:52:63:61:54:88:08:4b:c8:bc:ba:21:10:4f:8d:
                    29:7c:7d:d7:88:e2:4a:74:2a:c9:b1:3e:00:35:22:
                    82:dc:e4:f8:6a:fd:ef:31:53:45:22:9a:b2:da:5e:
                    3a:35:54:b3:07:f7:1e:2e:54:ab:33:ac:d0:d8:ee:
                    c3:fe:e8:25:60:5f:83:8f:29:35:b2:83:78:bb:b1:
                    f8:c4:84:41:47:8d:9b:9b:83:6f:69:4d:b1:f9:34:
                    61:32:c6:12:03:04:fe:4d:a4:d6:0c:7c:8d:e6:67:
                    a8:3b:3b:88:10:b5:e3:4e:76:0f:d0:ba:18:58:bb:
                    a7:03:ae:0d:05:ff:db:3d:a8:c9:2e:51:30:3e:56:
                    6c:69:25:ae:4a:d5:ed:98:bb:e3:a3:7b:76:31:ea:
                    7c:21:7d:4f:64:03:5c:e8:fb:5b:4e:f4:7a:e3:6f:
                    5f:50:24:23:ad:fb:c6:6c:29:57:11:50:d1:a6:bb:
                    44:8f:f8:46:d8:1f:6a:c2:a3:ef:dc:12:32:b3:9c:
                    f3:20:de:06:f3:db:7e:67:5e:7b:ce:3b:7c:2b:6c:
                    3d:4c:1a:8e:6a:78:05:84:fa:91:23:fb:74:7e:65:
                    df:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DA:F2:CE:2D:F3:E2:D2:A7:68:65:A8:7B:A2:73:D6:B7:83:BA:72
            X509v3 Authority Key Identifier:
                keyid:88:31:D6:21:D1:92:F9:2D:B0:93:D9:33:09:2C:1E:23:6B:4D:49:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iDHWIdGS-S2wk9kzCSweI2tNSXs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/440781-f614-450d-9d9f-2b8761d8a137/1/iDHWIdGS-S2wk9kzCSweI2tNSXs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:bc:4f:01:9d:16:a3:e5:f9:46:61:ae:2c:dd:4d:85:80:be:
         59:8d:75:46:53:a5:91:86:7e:a6:08:10:23:53:ce:55:a3:c4:
         f8:6e:9b:5c:25:80:e2:a6:e5:d0:e8:a7:ae:03:45:57:ea:0d:
         be:0e:61:8f:b2:0d:2e:e9:27:35:e5:55:8e:a5:e7:3a:bd:09:
         9c:a6:2d:fd:93:b2:46:6f:6a:dc:76:58:41:96:b3:72:73:af:
         2a:6d:62:1a:90:e5:78:54:0e:51:aa:3c:bc:6a:66:eb:65:46:
         1f:43:c7:f6:2c:61:2f:1a:d0:30:7f:84:5c:55:4e:52:9d:d1:
         60:60:8f:1f:7d:37:03:a8:ae:7d:f5:63:ac:9e:86:51:33:a4:
         7a:aa:a8:52:f0:c6:99:e6:6b:e4:37:4c:3b:f1:c0:38:aa:54:
         93:34:46:ff:03:ac:53:15:e7:f9:32:4b:83:63:da:a7:83:25:
         fc:d9:d1:7b:df:5f:38:dd:22:e3:d2:69:d5:0c:e0:4d:b5:4b:
         b7:60:7c:3f:35:43:ab:57:4f:9d:a3:e1:5c:e5:6c:33:a9:03:
         68:e8:35:91:31:a9:df:e8:06:77:f2:08:fa:ed:7e:b3:ad:a2:
         ad:7e:0a:a2:97:7d:5b:ba:b3:44:2f:4c:98:4b:09:32:3c:37:
         17:e9:d5:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Go80MObalWdX/V3FD2K0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MzFkNjIxZDE5MmY5MmRiMDkzZDkzMzA5MmMxZTIzNmI0
ZDQ5N2IwHhcNMjQwNTE3MTMwMDMyWhcNMjQwNTE4MTMwMDMyWjAzMTEwLwYDVQQD
Eyg4YmRhZjJjZTJkZjNlMmQyYTc2ODY1YTg3YmEyNzNkNmI3ODNiYTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2gajLKvQanpTsm1OuDi/30sX1M6
RrkSJVP5ISICUmNhVIgIS8i8uiEQT40pfH3XiOJKdCrJsT4ANSKC3OT4av3vMVNF
Ipqy2l46NVSzB/ceLlSrM6zQ2O7D/uglYF+Djyk1soN4u7H4xIRBR42bm4NvaU2x
+TRhMsYSAwT+TaTWDHyN5meoOzuIELXjTnYP0LoYWLunA64NBf/bPajJLlEwPlZs
aSWuStXtmLvjo3t2Mep8IX1PZANc6PtbTvR6429fUCQjrfvGbClXEVDRprtEj/hG
2B9qwqPv3BIys5zzIN4G89t+Z157zjt8K2w9TBqOangFhPqRI/t0fmXfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIva8s4t8+LSp2hlqHuic9a3g7pyMB8GA1UdIwQY
MBaAFIgx1iHRkvktsJPZMwksHiNrTUl7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYt
MmI4NzYxZDhhMTM3LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS80NDA3ODEtZjYxNC00NTBkLTlkOWYtMmI4NzYxZDhhMTM3
LzEvaURIV0lkR1MtUzJ3azlrekNTd2VJMnROU1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybxPAZ0W
o+X5RmGuLN1NhYC+WY11RlOlkYZ+pggQI1POVaPE+G6bXCWA4qbl0OinrgNFV+oN
vg5hj7INLuknNeVVjqXnOr0JnKYt/ZOyRm9q3HZYQZazcnOvKm1iGpDleFQOUao8
vGpm62VGH0PH9ixhLxrQMH+EXFVOUp3RYGCPH303A6iuffVjrJ6GUTOkeqqoUvDG
meZr5DdMO/HAOKpUkzRG/wOsUxXn+TJLg2Pap4Ml/NnRe99fON0i49Jp1QzgTbVL
t2B8PzVDq1dPnaPhXOVsM6kDaOg1kTGp3+gGd/II+u1+s62irX4Kopd9W7qzRC9M
mEsJMjw3F+nVgw==
-----END CERTIFICATE-----
Generated at Fri May 17 18:04:20 2024 by rpki-client on console-ams.rpki-client.org